Skip to content
OpenAdvisories

Product · otwthemes

Sidebar Manager Light

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-76562

    Sidebar Manager Light <= 1.18 - Unauthenticated Stored Cross-Site Scripting via 'sbm_description' Parameter

    The Sidebar Manager Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sbm_description' parameter in all versions up to, and including, 1.18 due to insufficient input sanitization and output escaping. This makes it possible for u…

    otwthemes Sidebar Manager Light Web / CMS
  • High 7.1
    CVE-2025-32112

    WordPress Sidebar Manager Light plugin <= 1.18 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Sidebar Manager Light sidebar-manager-light allows Cross Site Request Forgery.This issue affects Sidebar Manager Light: from n/a through <= 1.18.

    otwthemes Sidebar Manager Light